| Server IP : 210.245.233.93 / Your IP : 216.73.216.226 Web Server : Apache/2.2.15 (CentOS) System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64 User : apache ( 48) PHP Version : 5.3.3 Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/hkosl.com/kelvin/webadmin/ |
Upload File : |
<?php
include 'config.php';
// Check if the user is logged in
if ((!isSet($_SESSION['loginname'])) || ($loggin <> '1'))
{
header("Location: login.php");
exit;
}
require("configure.php");
$menuid = check_input($_REQUEST["menuid"]);
$galleryid = check_input($_REQUEST["galleryid"]);
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Content Management System (CMS) - Powered by One Solution Limited</title>
<link rel="stylesheet" type="text/css" href="css/style.css" />
<!-- Main Menu -->
<link rel="stylesheet" type="text/css" href="css/menu.css" />
<script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js"></script>
<script type="text/javascript" src="js/ddaccordion.js"></script>
<script type="text/javascript" src="js/menuddaccordion.js"></script>
<!-- End Main Menu -->
<script type="text/javascript">
function DeleteRowCategory(gdetid,menuid)
{
if (confirm("Are you sure you want to delete?"))
{
window.location.href = 'gallery_detail_delete.php?gdetid='+gdetid+'&menuid='+menuid;
}
}
</script>
<script type="text/JavaScript">
function onclick_cat(id, menuid){
top.location.href='gallery_detail_index.php?galleryid='+id+'&menuid='+menuid;
}
</script>
</head>
<body>
<table width="1000" height="600" border="0" cellpadding="0" cellspacing="0">
<tr>
<td width="200" align="left" valign="top"><table width="200" border="0" cellpadding="0" cellspacing="0">
<tr>
<td height="70" align="left" valign="middle"> </td>
</tr>
<tr>
<td width="200" align="left" valign="top"><!-- Main Menu --><?php require("menu.php");?><!-- End Main Menu --></td>
</tr>
</table></td>
<td width="800" align="left" valign="top"><table width="800" border="0" cellpadding="0" cellspacing="0">
<tr>
<td><table width="800" border="0" cellspacing="0" cellpadding="0">
<tr>
<td height="70" class="pagetitletxt"> </td>
<td width="50" align="center" class="icontxt"><a href="gallery_detail_addform.php?menuid=<?=$menuid?>&galleryid=<?=$galleryid?>"><img src="images/iconNew.png" alt="Add" width="32" height="32" border="0" /><br /> Add </a></td>
</tr>
</table></td>
</tr>
<tr>
<td class="pagetitletxt"> <b><img src="images/iconList.jpg" width="48" height="48" align="absmiddle" />
<?php
if($menuid == "3")
echo "Product";
else if($menuid == "4")
echo "Design";
else {}
?> Gallery Detail (Images) </b></td>
</tr>
<tr>
<td height="25" align="left" valign="middle" class="msg"><?php echo $_GET['msg']; ?></td>
</tr>
<tr>
<td height="35" align="left" valign="middle" class="content"> <strong>Gallery Name</strong>
<select name="galleryid" onChange="onclick_cat(this.options[this.options.selectedIndex].value, <?=$menuid?>)">
<?php
$get_galleryid = $galleryid;
if($get_galleryid == "0"){
echo "<option value='-1' selected >All</option>";
$sql = "select * from gallery where gallerystatus = 1 and belongpage='$menuid'";
$result = mysql_query($sql);
while ($row = mysql_fetch_array($result,MYSQL_ASSOC)){
$row_galleryid = $row["galleryid"];
$gallerytitleen = $row["gallerytitleen"];
echo "<option value='".$row_galleryid."' >".$gallerytitleen."</option>";
}
}else{
echo "<option value='0'>All</option>";
$sql = "select * from gallery where gallerystatus = 1 and belongpage='$menuid'";
$result = mysql_query($sql);
while ($row = mysql_fetch_array($result,MYSQL_ASSOC)){
$row_galleryid = $row["galleryid"];
$gallerytitleen = $row["gallerytitleen"];
if($row_galleryid == $get_galleryid){
echo "<option value='".$row_galleryid."' selected >".$gallerytitleen."</option>";
}else{
echo "<option value='".$row_galleryid."' >".$gallerytitleen."</option>";
}
}
}
?>
</select>
</td>
</tr>
<tr>
<td align="left" valign="middle">
<form name="form1" method="post" action="gallery_detail_sort_update.php">
<input type="hidden" name="menuid" value="<?=$menuid?>" />
<input type="hidden" name="galleryid" value="<?=$galleryid?>" />
<table width="800" border="0" cellpadding="0" cellspacing="0">
<tr>
<td width="10" class="listtitletxt"></td>
<td width="40" class="listtitletxt">Sort</td>
<td width="350" class="listtitletxt">Gallery Images</td>
<?php
if($galleryid == "0") {
echo "<td width='400' class='listtitletxt'>Gallery Name</td>";
}
?>
<td width="100" class="listtitletxt">Uploaded By</td>
<td width="100" class="listtitletxt">Uploaded Date</td>
<td width="20" class="listtitletxt"></td>
<!--<td width="20" class="listtitletxt"></td>-->
<td width="20" class="listtitletxt"></td>
</tr>
<?php
if($galleryid == "0") {
$result = mysql_query("SELECT * FROM sys_cms_login cms, gallery_detail gdet ,gallery gal where cms.cmsloginid = gdet.createby and gdet.galleryid = gal.galleryid and gal.gallerystatus = 1 and gal.belongpage='".$menuid."' ORDER BY gdet.galleryid ASC, gdetsort ASC ");
} else {
$result = mysql_query("SELECT * FROM sys_cms_login cms, gallery_detail gdet ,gallery gal where cms.cmsloginid = gdet.createby and gdet.galleryid = gal.galleryid and gal.gallerystatus = 1 and gal.belongpage='".$menuid."' and gdet.galleryid= '".$galleryid."' ORDER BY gdetsort ASC ");
}
while ($row = mysql_fetch_array($result,MYSQL_ASSOC))
{
print "<tr>";
print "<td class='listtxt' style='padding-left:5'> </td>";
//sort
print "<td class='listtxt' valign='middle' align='left'><input class='sortinput' type='text' name='idarraynumber[]' value='".$row{'gdetsort'}."' size='2' />
<input type='hidden' name='idarray[]' value='".$row{'gdetid'}."'><input type='hidden' name='galleryid' value='".$row{'galleryid'}."'></td>";
//image
if ($row{'gdetimage'} <> '') {
print "<td class='listtxt' style='padding-left:5'><img src='../images/gallery/thumb_".$row{'gdetimage'}."' height='120' border='0'></td>";
} else {
print "<td class='listtxt' style='padding-left:5'></td>";
}
if($galleryid == "0") {
if ($row{'gallerytitleen'} <> '') {
print "<td class='listtxt' style='padding-left:5'>".$row{'gallerytitleen'}."</td>";
} else {
print "<td class='listtxt' style='padding-left:5'></td>";
}
}
//uploaded by
if ($row{'cmsusername'} <> '') {
print "<td class='listtxt' style='padding-left:5'>".$row{'cmsusername'}."</td>";
} else {
print "<td class='listtxt' style='padding-left:5'></td>";
}
//uploaded date
if ($row{'createdate'} <> '') {
print "<td class='listtxt' style='padding-left:5'>".$row{'createdate'}."</td>";
} else {
print "<td class='listtxt' style='padding-left:5'></td>";
}
//Status
print "<td class='listtxt' align='center'>";
if ($row{'gdetstatus'} == '1') // Enable
{
print "<a href='gallery_detail_status.php?gdetid=".$row{'gdetid'}."&galleryid=".$row{'galleryid'}."&menuid=".$menuid."'>";
print "<img src='images/tick.png' title='Enable' alt='Enable' border='0' hspace='2'></a>";
}
else // Disable
{
print "<a href='gallery_detail_status.php?gdetid=".$row{'gdetid'}."&galleryid=".$row{'galleryid'}."&menuid=".$menuid."'>";
print "<img src='images/cross.png' title='Disable' alt='Disable' border='0' hspace='2'></a>";
}
print "</td>";
// Modify
//print "<td class='listtxt' align='center'><a href='#' onClick=\"window.location='gallery_detail_modifyform.php?gdetid=".$row{'gdetid'}."'\"><img src='images/btnModify.png' title='Modify' alt='Modify' hspace='2' border='0'></a></td>";
// Delete
print "<td class='listtxt' align='center'><a href='#' onClick=\"DeleteRowCategory(".$row{'gdetid'}.",".$menuid.")\"><img src='images/btnDelete.png' title='Delete' alt='Delete' hspace='2' border='0'></a></td>";
print "</tr>";
}
mysql_close($dbh);
?>
</table><input type="submit" value="Update Sort"></form></td>
</tr>
</table>
</td></tr>
</table>
</body>
</html>
<?php
function getSelect($field1, $field2)
{
if ($field1 == $field2)
{
return "selected";
}
else
{
return "";
}
}
?>